On 08/30/2016 01:54 PM, Fabian Wloch wrote:
Am Dienstag, 30. August 2016 19:49:02 UTC+2 schrieb [email protected]:
What would a BIOS exploit mean for QUBES users..?
1. Can the BIOS directly access the network? For something like sending
keystrokes directly to the network card, bypassing QUBES OS..?
2. Or does it just inject something into the OS upon boot, and then it's an
infected QUBES OS itself which transmits keystrokes?
3. Or can keystrokes and data be stored in the BIOS for retrieval for retrieval
if someone has physical access to the computer?
4. Or something else altogether?
I want to know as much about what a BIOS exploit could do for QUBES users.
Well, as far as I know, it would be 1+2+3+4.
If you have BIOS access, you have pretty much access to *everything*.
Thats the reason I decided myself against a DualBoot System with my new
workstation. Still thinking about buying a new seperate computer for gaming, or
using my really-really old one for this, because there is no chance in hell I
boot something else beside Qubes on this machine.
-Fabian
Qubes can also be thought of as a way to prevent BIOS exploits from
succeeding, especially from the network or USB. Qubes' anti-evil-maid
feature can also help protect against physical attacks on the BIOS.
Chris
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/6eab0e93-05ab-1b1d-6df9-c372034aa004%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.
